Export a Saved Configuration from One Firewall and Import it into Another

On the first firewall, save the current configuration to a named configuration snapshot using the

save config to

<filename>

command in configuration mode. For example:

admin@PA-fw1# 
save config to fw1-config

Export the named configuration snapshot and log database to an SCP-enabled server using the

scp export

command in operational mode. When prompted, enter the password for your SCP server account.

admin@fw1> 
scp export configuration from 
<named-config-file> to 
<username@host:path>

For an SCP server running on Windows, the destination folder/filename path for both the export and import commands requires a drive letter followed by a colon. For example:

admin@fw1> 
scp export configuration from fw1-config.xml to ccrisp@10.10.10.5:
c:
/fw-config

Log in to the firewall to which you want to copy the configuration and logs, and then import the configuration snapshot and log database. When prompted, enter the password for your SCP server account.

admin@fw2> 
scp import configuration from 
<username@host:path_to_named-config-file>

For example (on a Windows-based SCP server):

admin@fw2> 
scp import configuration from ccrisp@10.10.10.5:
c:
/fw-configs/fw1-config.xml